When an AI agent at the checkout makes its provider subject to licensing
On 16 September 2026 the law firm Annerton opened up the regulatory question behind agentic payments: what counts is not the product label but the actual activity. If an agent accesses the account and initiates a transfer, that can be a payment initiation service requiring a licence.
What happened
On 16 September 2026 the law firm Annerton used its format “Alles Legal — FinTech-Recht kompakt” (episode 146) to address the question of when the provider of a paying AI agent needs a licence from the supervisory authority. The speaker is lawyer Frank Müller, partner at the Munich office, in conversation with Dana Wondra of Payment & Banking. The core of the assessment: “For the regulatory classification it does not matter whether a company describes its product as an AI agent, a software solution or a technical platform.” What is decisive is the actual activity. If the agent accesses a person's bank account and initiates a transfer, that can be a payment initiation service requiring a licence. If the provider itself receives funds and passes them on, the requirements for money remittance business come into play. Conversely, not every technical involvement in a payment process triggers a licensing obligation: pure data processing, authentication or the provision of an interface can fall under the exemption for technical service providers. Where stablecoins are involved, crypto regulation requirements are added on top. No transcript of the episode is available.
Who it affects
First of all software houses, shop and point-of-sale providers as well as AI providers building checkout automation who have so far assumed they are “just technology”. Indirectly every merchant who lets such an agent into their shop: with a provider that has no licence, the question ultimately arises whether the payment process itself is sound.
Assessment
At last somebody is asking the question that has been consistently missing from the announcements of the past four weeks. Visa, Mastercard, Worldline and Google have presented protocols, frameworks and interfaces — none of them talked about licensing, because the big houses have held one for a long time. But the providers now approaching merchants with agents are often young software firms. For them this is not a formality, it is the question of whether their business model is permissible at all in the form presented.
From a payment network operator's point of view, the functional approach is nothing new, it is everyday business. We are judged by what we actually do, not by what we call it in the brochure — and not everyone who has just put “agentic” on their home page survives that same test. Merchants therefore do not need detailed legal knowledge, they need a single habit: before the pilot project, ask under which licence or under which exemption the provider operates, and get the answer in writing. Anyone who dodges the question has already answered it.
What to do now
- Ask every provider of a paying agent in writing: own licence, activity under a third party's licence, or reliance on the exemption for technical service providers — and for which activity exactly.
- Set down in the contract who initiates the payment process and who never holds the funds at any point. In case of doubt, that determines the classification.
- Only connect pilot projects through your existing payment service provider or payment network operator for as long as the regulatory position of agent providers remains unclear.